Question: 2. (3.5 points) Read the following article, focusing on the registry keys it describes (e.g., Run, RunOnce, etc): http://www.symantec.com/connect/articles/are-you-infected-detecting-malware-infection. (Note: for more technical details

2. (3.5 points) Read the following article, focusing on the registry keys

2. (3.5 points) Read the following article, focusing on the registry keys it describes (e.g., Run, RunOnce, etc): http://www.symantec.com/connect/articles/are-you-infected-detecting-malware-infection. (Note: for more technical details of how these keys and others are still used currently, as optional reading, see here: https://attack.mitre.org/techniques/T1547/001/). a. (1 point) Write and submit a PowerShell script named _2a.ps1, which adds a value to the HKLM\Run key for a benign program of your choice, where the value name contains your own name (You should see this value as one of the outputs of your part (b) code when you print the keys and values). b. (2.5 points) Write and submit a program that will print out a list of all of the values in the Run and RunOnce keys, and that of their subkeys (if present). Your code should work on any Windows 10 machine's registry (i.e., it cannot be specific to your own machine). Note that the Run and RunOnce keys appear under both HKEY_LOCAL_MACHINE and HKEY_CURRENT_USERS (under the same path). The printed list should also contain the values in the subkeys in these keys, if any are present (i.e., it needs to search recursively). You have two options for writing and submitting your program: (Option i): Write a Python program named _2b.py that contains a function called listRegistryStartedPrograms(), which meets the objectives outlined above in this question 2b. (OR Option ii): Write a Powershell script named _2b.ps1 that meets the objectives outlined above in this question 2b.

Step by Step Solution

3.51 Rating (148 Votes )

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock

STEP 1 Follow step 2 STEP 2 a greprl1 if za then echo Strim not found exit for ... View full answer

blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Programming Questions!